A judge told the Pentagon it cannot punish Anthropic for refusing to build surveillance tools

An AI company told the United States military there were things it would not let its technology do. The military tried to blacklist it for saying so. A federal judge has now ruled that punishment illegal.

The Ruling

US District Judge Rita Lin, sitting in San Francisco, held that the Department of Defense violated the First Amendment when it designated Anthropic a national security supply-chain risk.

That designation is a serious instrument. It is applied to companies whose products might expose military systems to infiltration or sabotage by adversaries, and it effectively excludes a firm from federal work.

Lin found it had been applied here for a different purpose. The department acted, she wrote, out of a desire to make a public example of the company.

Her 59-page decision contains the line that will be quoted for years: ‘The empty invocation of national security is not a blank check to punish and retaliate against government critics.’

What Anthropic Refused To Do

The dispute began with two specific refusals. Anthropic would not permit its Claude models to be used for surveillance of Americans, or in fully autonomous weapons.

It is worth being precise about the scope, because it is narrower than the framing sometimes suggests. This was not a refusal to work with the military. Anthropic sells to government, and the disagreement concerned two categories of use rather than the relationship itself.

Anthropic's suit alleged that Defense Secretary Pete Hegseth had overstepped his authority, and characterised the administration's response as an unlawful campaign of retaliation.

The Complication Nobody Should Skip

There is a second case, and it went the other way.

Anthropic filed in two places: the federal district court in San Francisco, and a federal appeals court in Washington DC. In April, the Washington panel declined to issue an order shielding Anthropic from the consequences of the designation while it continued gathering evidence.

So the same dispute has now produced opposite outcomes in two courts four months apart. Industry figures have said publicly that the conflict muddles the landscape for anyone trying to work out what the rules actually are.

That is a real caveat on this week's ruling and it belongs in any honest account of it. Lin's decision is the more recent and the more substantive — a merits ruling rather than a refusal of interim relief — but it is a district court decision that the government can appeal, and a separate appellate body has already declined to help Anthropic once.

Why It Matters Beyond One Company

The question underneath the litigation is whether an AI company can set limits on how a government uses its technology without being punished for it.

Every frontier laboratory has published a usage policy restricting certain applications. Those policies are the primary mechanism by which the industry claims to govern itself, and they are the thing regulators, journalists and customers are repeatedly pointed to as evidence that self-regulation works.

A usage policy that cannot be enforced against the most powerful customer in the world is not a usage policy. If refusing a government application results in exclusion from federal contracting, then the policies survive only for as long as no one important tests them.

Lin's ruling says the government cannot make that trade explicit. It does not stop the government making it quietly, through procurement decisions that are harder to attribute.

The Timing

The ruling arrives while Anthropic is preparing to go public.

The company has filed confidentially, its annualised revenue reached roughly $65 billion by the end of July, and investors have discussed a valuation that would make it the largest listing ever completed. An unresolved federal blacklisting is precisely the kind of contingency that has to be disclosed to prospective shareholders and precisely the kind that depresses a price.

Removing it, even provisionally, is worth a great deal to Anthropic in the next two months. That does not make the ruling wrong, but it explains why this particular decision, in this particular week, is a larger commercial event than the underlying contract value would suggest.

What To Watch

Three things determine whether this holds.

Whether the government appeals Lin's decision, and to which circuit. Whether the Washington case, still collecting evidence, eventually reaches a conclusion that conflicts with hers on the merits rather than on interim relief. And whether other laboratories now hold firmer lines in their own government contracts, having watched one company be punished for it and then win.

The last of those is the one with consequences for everybody else. An industry that governs itself through usage policies has just been shown both what enforcement costs and that a court may cover the cost afterwards.